update rails for security fixes
version bump